Oracle Fusion Middleware
Oracle WebLogic Server API Reference
11g Release 1 (10.3.5)

Part Number E13941-05

weblogic.xml.security.specs
Class SecuritySpec

java.lang.Object
  extended by weblogic.xml.security.specs.SecuritySpec
All Implemented Interfaces:
SpecConstants

Deprecated. please use new WS Security API

public class SecuritySpec
extends Object
implements SpecConstants

The class represents the top level node of a SecuritySpec. The SecuritySpec is used to described desired WSSE Security elements, independent of the WSSE version. These are specs are the basis of inbound and outbound policy in WLS. Created: Sat Aug 10 18:10:49 2002


Field Summary
static String DEFAULT_SPEC_ID
          Deprecated.  
 
Fields inherited from interface weblogic.xml.security.specs.SpecConstants
ATTR_CANONICALIZATION_METHOD, ATTR_ENCODING, ATTR_ENCRYPT_BODY, ATTR_ENCRYPTION_METHOD, ATTR_ID, ATTR_KEY_ALIAS, ATTR_KEY_PASSWORD, ATTR_KEYWRAPPING_METHOD, ATTR_LOCALPART, ATTR_NAMESPACE, ATTR_PASSWORDTYPE, ATTR_REALM, ATTR_REF_ID, ATTR_RESTRICTION, ATTR_SIGN_BODY, ATTR_SIGNATURE_METHOD, ATTR_VALUETYPE, DEFAULT_PREFIX, RESTRICTION_BODY, RESTRICTION_HEADER, SOAP_ATTR_ROLE, SOAP_ENV_PREFIX, SPEC_URI, TAG_BINARY_SECURITY_TOKEN_SPEC, TAG_CLOCK_PRECISION, TAG_CLOCKS_SYNCHRONIZED, TAG_DD_SECURITY, TAG_ENCRYPTION_KEY, TAG_ENCRYPTION_SPEC, TAG_ENFORCE_PRECISION, TAG_ENTITY_NAME, TAG_ENTITY_PASSWORD, TAG_FRESHNESS, TAG_GENERATE_TS, TAG_REQUIRE_TS, TAG_SECURITY_SPEC, TAG_SECURITY_SPEC_REF, TAG_SIGNATURE_KEY, TAG_SIGNATURE_SPEC, TAG_TS_CONFIG, TAG_TYPE_IDENTIFIER, TAG_USER, TAG_USERNAME_TOKEN_SPEC, TAG_VALIDITY, XSD_FALSE, XSD_TRUE
 
Constructor Summary
SecuritySpec()
          Deprecated.  
SecuritySpec(String name, String targetNS)
          Deprecated. Creates a new SecuritySpec instance.
SecuritySpec(String name, String targetNS, String actorURI)
          Deprecated. Creates a new SecuritySpec instance.
 
Method Summary
 Security createSecurity(String role, TimestampConfig tsConfig, String username, String password, X509Certificate encryptCert, PrivateKey sigKey, X509Certificate sigCert, SecurityElementFactory factory)
          Deprecated.  
 boolean getEnablePasswordAuth()
          Deprecated. Returns whether Password based auth has been enabled for this spec.
 EncryptionSpec getEncryptionSpec()
          Deprecated. Returns the EncryptionSpec for this SecuritySpec
 String getId()
          Deprecated. Returns the id for this SecuritySpec
 String getRole()
          Deprecated. Returns the role for this SecuritySpec
 SignatureSpec getSignatureSpec()
          Deprecated. Returns the SignatureSpec for this SecuritySpec
 BinarySecurityTokenSpec setBinarySecurityTokenSpec(BinarySecurityTokenSpec spec)
          Deprecated. addBinarySecurityTokenSpec adds a spec for a BinarySecurityTokenImpl to the SecuritySpec.
 BinarySecurityTokenSpec setBinarySecurityTokenSpec(String type)
          Deprecated. addBinarySecurityTokenSpec adds a spec for a BinarySecurityTokenImpl to the SecuritySpec.
 void setEnablePasswordAuth(boolean enable)
          Deprecated. enables plain text password auth for this SecuritySpec
 EncryptionSpec setEncryptionSpec(EncryptionSpec spec)
          Deprecated.  
 EncryptionSpec setEncryptionSpec(String encryptionURI, X509Certificate cert)
          Deprecated. addEncryptionSpec adds a spec for encrypted data to the SecuritySpec.
 EncryptionSpec setEncryptionSpec(String encryptionURI, X509Certificate cert, boolean encryptBody)
          Deprecated. addEncryptionSpec adds a spec for encrypted data to the SecuritySpec.
 void setId(String id)
          Deprecated.  
 void setNamespace(String namespace)
          Deprecated.  
 void setRole(String role)
          Deprecated.  
 SignatureSpec setSignatureSpec(SignatureSpec spec)
          Deprecated. setSignatureSpec adds the provided signatureSpec to this SecuritySpec
 SignatureSpec setSignatureSpec(String canonicalizationURI, String signatureURI)
          Deprecated. setSignatureSpec adds a SignatureSpec to the SecuritySpec element.
 SignatureSpec setSignatureSpec(String canonicalizationURI, String signatureURI, boolean signedBody)
          Deprecated. setSignatureSpec adds a SignatureSpec to the SecuritySpec element.
 UsernameTokenSpec setUsernameTokenSpec(String passwordType)
          Deprecated. setUsernameTokenSpec adds a UsernameTokenSpec to the SecuritySpec element.
 UsernameTokenSpec setUsernameTokenSpec(String passwordType, String realm)
          Deprecated. setUsernameTokenSpec adds a UsernameTokenSpec to the SecuritySpec element.
 UsernameTokenSpec setUsernameTokenSpec(UsernameTokenSpec spec)
          Deprecated. setUsernameTokenSpec adds a UsernameTokenSpec to the SecuritySpec element.
 
Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
 

Field Detail

DEFAULT_SPEC_ID

public static final String DEFAULT_SPEC_ID
Deprecated. 
See Also:
Constant Field Values
Constructor Detail

SecuritySpec

public SecuritySpec()
Deprecated. 

SecuritySpec

public SecuritySpec(String name,
                    String targetNS)
Deprecated. 
Creates a new SecuritySpec instance.

Parameters:
name - a String value
targetNS - a String value identifying the namespace to be used for Security elements.

SecuritySpec

public SecuritySpec(String name,
                    String targetNS,
                    String actorURI)
Deprecated. 
Creates a new SecuritySpec instance.

Parameters:
name - a String value
targetNS - a String value identifying the namespace to be used for Security elements.
actorURI - a String value identifying the the target Actor for the Security Element.
Method Detail

setRole

public void setRole(String role)
Deprecated. 

setId

public void setId(String id)
Deprecated. 

setNamespace

public void setNamespace(String namespace)
Deprecated. 

setSignatureSpec

public SignatureSpec setSignatureSpec(String canonicalizationURI,
                                      String signatureURI)
Deprecated. 
setSignatureSpec adds a SignatureSpec to the SecuritySpec element. The SignatureSpec can be further configured using the returned instance.

Parameters:
canonicalizationURI - a String value that is URI of the canonicalization method to be used in the signature
signatureURI - a String value that is the URI of the signature method to be used for the signature.
Returns:
a SignatureSpec value

setSignatureSpec

public SignatureSpec setSignatureSpec(String canonicalizationURI,
                                      String signatureURI,
                                      boolean signedBody)
Deprecated. 
setSignatureSpec adds a SignatureSpec to the SecuritySpec element. The SignatureSpec can be further configured using the returned instance.

Parameters:
canonicalizationURI - a String value that is URI of the canonicalization method to be used in the signature
signatureURI - a String value that is the URI of the signature method to be used for the signature.
signedBody - indicates whether the operation should cover the SOAP Body.
Returns:
a SignatureSpec value

setSignatureSpec

public SignatureSpec setSignatureSpec(SignatureSpec spec)
Deprecated. 
setSignatureSpec adds the provided signatureSpec to this SecuritySpec

Parameters:
spec - a SignatureSpec
Returns:

setUsernameTokenSpec

public UsernameTokenSpec setUsernameTokenSpec(String passwordType)
Deprecated. 
setUsernameTokenSpec adds a UsernameTokenSpec to the SecuritySpec element.

Parameters:
passwordType - a String value
Returns:
an UsernameTokenSpec value

setUsernameTokenSpec

public UsernameTokenSpec setUsernameTokenSpec(String passwordType,
                                              String realm)
Deprecated. 
setUsernameTokenSpec adds a UsernameTokenSpec to the SecuritySpec element.

Parameters:
passwordType - a String value
realm - a String value
Returns:
an UsernameTokenSpec value

setUsernameTokenSpec

public UsernameTokenSpec setUsernameTokenSpec(UsernameTokenSpec spec)
Deprecated. 
setUsernameTokenSpec adds a UsernameTokenSpec to the SecuritySpec element.

Parameters:
spec -
Returns:

setBinarySecurityTokenSpec

public BinarySecurityTokenSpec setBinarySecurityTokenSpec(String type)
Deprecated. 
addBinarySecurityTokenSpec adds a spec for a BinarySecurityTokenImpl to the SecuritySpec.

Parameters:
type - a String value indicating the type of BST to be included (i.e. X509Certificate)
Returns:
an UsernameTokenSpec value

setBinarySecurityTokenSpec

public BinarySecurityTokenSpec setBinarySecurityTokenSpec(BinarySecurityTokenSpec spec)
Deprecated. 
addBinarySecurityTokenSpec adds a spec for a BinarySecurityTokenImpl to the SecuritySpec.

Parameters:
spec -
Returns:

setEncryptionSpec

public EncryptionSpec setEncryptionSpec(String encryptionURI,
                                        X509Certificate cert)
Deprecated. 
addEncryptionSpec adds a spec for encrypted data to the SecuritySpec.

Parameters:
encryptionURI - a String value that is the URI of the encryption algorith to be used.
cert - a java.security.cert.X509Certificate value that is the certificate of the receiver.
Returns:
an UsernameTokenSpec value

setEncryptionSpec

public EncryptionSpec setEncryptionSpec(String encryptionURI,
                                        X509Certificate cert,
                                        boolean encryptBody)
Deprecated. 
addEncryptionSpec adds a spec for encrypted data to the SecuritySpec.

Parameters:
encryptionURI - a String value that is the URI of the encryption algorith to be used.
cert - a java.security.cert.X509Certificate value that is the certificate of the receiver.
encryptBody - indicates whether the operation should cover the entire SOAP Body.
Returns:
an UsernameTokenSpec value

setEncryptionSpec

public EncryptionSpec setEncryptionSpec(EncryptionSpec spec)
Deprecated. 

getRole

public String getRole()
Deprecated. 
Returns the role for this SecuritySpec

Returns:

getId

public String getId()
Deprecated. 
Returns the id for this SecuritySpec

Returns:

setEnablePasswordAuth

public void setEnablePasswordAuth(boolean enable)
Deprecated. 
enables plain text password auth for this SecuritySpec

Parameters:
enable -

getEnablePasswordAuth

public boolean getEnablePasswordAuth()
Deprecated. 
Returns whether Password based auth has been enabled for this spec.

Returns:

getSignatureSpec

public SignatureSpec getSignatureSpec()
Deprecated. 
Returns the SignatureSpec for this SecuritySpec

Returns:

getEncryptionSpec

public EncryptionSpec getEncryptionSpec()
Deprecated. 
Returns the EncryptionSpec for this SecuritySpec

Returns:

createSecurity

public final Security createSecurity(String role,
                                     TimestampConfig tsConfig,
                                     String username,
                                     String password,
                                     X509Certificate encryptCert,
                                     PrivateKey sigKey,
                                     X509Certificate sigCert,
                                     SecurityElementFactory factory)
Deprecated. 

Copyright 1996, 2011, Oracle and/or its affiliates. All rights reserved. Oracle is a registered trademark of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners.

Oracle Fusion Middleware
Oracle WebLogic Server API Reference
11g Release 1 (10.3.5)

Part Number E13941-05